SUNCTF // ANNUAL CAPTURE THE FLAG ● REGISTRATION EXTENDED :: LIMITED SEATS _ EDITION No. 03 :: 2026

SUNWAY UNIVERSITY // ANNUAL CAPTURE THE FLAG

{2026}
--days
:
--hours
:
--mins
:
--secs
submission format: sunctf26{y0u_f0und_th3_fl4g}
[00 // BRIEF]

The Mission

□ mission_brief.txt─ ▢ ×

> cat ./mission_brief.txt

The flags are hidden. The challenge awaits. SUNCTF 2026 is the Sunway Cybersecurity Club's flagship annual capture-the-flag, back for its third edition and bigger than ever.

It's a jeopardy-style CTF: a board of challenges across web, crypto, reverse engineering, pwn, forensics, OSINT and misc. Every solve captures a flag, every flag scores points, and the sharpest mix of skill, strategy and teamwork climbs the board.

Grab 1-3 friends and come hunt glory. The cold hard facts live next door in event.cfg.

> _

□ event.cfg─ ▢ ×
formatjeopardy_ctf
date06 SEP 2026 (SUN)
runtime08:00 - 17:00
venuesir jeffrey cheah hall, L4, sunway college
squad_size2-4 players
accessall MY uni students
stakesRM20,000+
seatslimited // first come first served
statusregistration_extended_
> cat ./entry_fees.txt // per pax
CSC membersRM25
Sunway studentsRM35 early bird / RM40 normal
Malaysian university studentsRM40 early bird / RM50 normal
// early_bird ended 19 JUL 2026
// registration EXTENDED, running until seats fill[ limited slots ]
[01 // SCHEDULE]

The Agenda

□ day_00 :: briefing.session─ ▢ ×

> ./briefing --info

date29 AUG 2026 (SAT)
time12:00 - 14:00
venueauditorium 7, sunway college
formatphysical / online
accessregistered participants only

status: CONFIRMED_

// pre-game briefing: challenge format, rules walkthrough, and your questions answered before the board goes live.

rsvp_on_luma

□ day_01 :: game.day :: 06 SEP 2026 (SUN)─ ▢ ×

> ./run_gameday.sh --verbose

[08:00]registrationDOORS_OPEN
[09:00]opening ceremonyCEREMONY
[09:30]challenges briefingFINAL_INTEL
[10:00]competition startsFLAGS_LIVE
[13:00]lunch breakREFUEL
[16:00]competition endsFLAGS_FROZEN
[16:20]prize giving ceremonyPAYOUT
[17:00]event endsSHUTDOWN
[02 // BOUNTY]

The Bounty

□ payouts --rank 1..5─ ▢ ×
#011st placeTBA
#022nd placeTBA
#033rd placeTBA
#044th placeTBA
#055th placeTBA
□ payouts --rank 6..10─ ▢ ×
#066th placeTBA
#077th placeTBA
#088th placeTBA
#099th placeTBA
#1010th placeTBA
[03 // PREVIEW]

The Scoreboard

> tail -f /var/log/sunctf/solves.log// simulated. real board goes live 06 sep
□ sunctf2026_poster.png─ ▢ ×
SUNCTF 2026 official poster
[04 // PROTOCOL]

Rules of Engagement

□ /etc/sunctf/rules.fw─ ▢ ×

> sunctf-fw --list-rules

# access_control

REQactive malaysian uni student :: any campus, any course
REQvalid student email + student ID :: extra proof may be requested
DENYfalse or misleading info :: DQ, no refund

# no student id, no shell

# team_formation

REQsquads of 2-4 :: no solos, no five-stacks
ALLOWcross-university teams :: recruit anywhere in MY
REQcaptain registers the whole squad :: one form per team
REQevery listed member consents
REQwhole squad joins the CSC discord :: role drops on submission

# pick a name you'd be proud to see on a projector

# game_day

INFOjeopardy ctf :: board runs 10:00-16:00
DENYremote play :: fully physical, sir jeffrey cheah hall L4
INFOlunch + tea provided :: pick your lunch in the form
REQown transport to + from venue

# loadout

REQlaptop + charger per player
INFOVM strongly recommended :: kali preferred
REQ1+ extension cord per team :: outlets are scarce
ALLOWpersonal hotspot :: optional but smart

# a hacker is only as good as their extension cord

# comms

INFObriefing 29 AUG 2026, 12:00-14:00 :: rsvp on luma, registered teams only
INFOupdates ship via email :: watch your inbox

# declaration :: signed at registration

REQabide by all CSC rules + decisions
REQprofessional resume upload :: may be shared with sponsors
INFOorganizers may verify anything :: fraud revokes entry
INFOpayment verified = registration locked
# the full legalese lives in the registration form. give it a read before you sign. read_full_t&c
[05 // ALLIES]

Partners & Sponsors

big names coming soon_
partner_0x01.enc [REDACTED] decrypting…
partner_0x02.enc [REDACTED] decrypting…
partner_0x03.enc [REDACTED] decrypting…
partner_0x04.enc [REDACTED] decrypting…
partner_0x05.enc [REDACTED] decrypting…
your_logo_here.svg

Want your name on the wall & your recruiters in the hall?

> sponsor_sunctf
[06 // SUPPORT]

Asked & Answered

$ faq "how much is entry?"

CSC members pay RM25. Sunway students pay RM35 early bird / RM40 normal. Students from other Malaysian universities pay RM40 early bird / RM50 normal. All per person.

$ faq "who's allowed to play?"

All active Malaysian university students. Students from different universities are welcome to team up together, mixed squads are completely fine.

$ faq "can i play solo?"

No solo runs this time, teams are 2 to 4 players. Short on teammates? Hop into the CSC Discord and find your people in the #SunCTF2026 channel.

$ faq "when does registration close?"

Registration has been extended, and now runs until the seats are full. Slots are limited and it's first come, first served, so don't sit on it. Early bird pricing ended 19 JUL 2026. Only the team captain fills in the form, once, for the whole squad.

$ faq "is it online?"

Nope, SUNCTF 2026 is fully in-person at the venue in event.cfg. Transport there and back is your own arrangement.

$ faq "what should my team bring?"

Each player: a laptop + charger, ideally with a virtual machine installed (Kali Linux preferred). Each team: at least one extension cord, since outlets are limited. A personal hotspot is recommended but not required.

$ faq "will we be fed?"

Yes! Lunch and tea-time refreshments are provided. Pick your preferred lunch option in the registration form.

$ faq "why do you want my resume?"

Every participant uploads an up-to-date professional CV at registration. It may be shared with companies for recruitment, networking or evaluation. Sponsors come to scout, so give it a quick polish before you upload.

$ faq "how do we know we're locked in?"

Your registration is complete once payment is verified by the organizing committee. Keep an eye on your email for updates, and stay in the Discord for announcements.

$ faq "what if i'm a noob?"

just train then lil bro.

Seriously though, that's genuinely the move. The beginner CTF tools on our loot_drop page exist for exactly this: TryHackMe, picoCTF, HackTheBox, OverTheWire. A few weeks of reps and you'll walk into the hall dangerous. There's always a sanity-check-tier challenge with your name on it.

$ faq "still got questions?"

The main channel is the CSC Discord: ping our helpers or ask in #SunCTF2026 for technical difficulties or feedback.

WhatsApp (texting only): Salli +6011-1160 8283 · Sam +6011-3330 1509 · Mustafa +6011-1784 6957.
Email: csc.sunway@gmail.com

[07 // ARCHIVE]

Past Editions

SUNCTF 2025 group photo
EDITION 02 // 2025

SUNCTF{2025}

Bigger board, bigger turnout. Teams from across Malaysia grinding challenges till the very last minute.

SUNCTF 2024 group photo
EDITION 01 // 2024

SUNCTF{2024}

Where it all started. The first flag was planted, the scoreboard survived, and the tradition was locked in.

flag captured?
prove it.

Registration for SUNCTF 2026 is open now. Grab your team before the board fills up.

register_now